Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: jOjnAhbzAVyosuu8Unz5mwF+Dme5uZZG4qXbBxwLH5s=
Subject key identifier: AB:4A:04:36:A0:4F:B0:BA:7A:1F:0A:37:72:FC:ED:E3:48:03:6C:DA
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 0190520F19A985369C2F1CEA50D710E8DB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 11E3
Signing time: Wed 26 Jun 2024 01:00:39 +0000
Manifest this update: Wed 26 Jun 2024 01:00:39 +0000
Manifest next update: Thu 27 Jun 2024 01:00:39 +0000
Files and hashes: 1: 67CdTiNYozCDfzsAx5MIvi7c4LI.roa (hash: H9MMMNuDkAt3TJd4bU13MEXWbtJgGTBkV2CPkBNZcLk=)
2: W_x5VW5d8eSoaAiYHkMlBY9fvY8.roa (hash: k7hveGUEp65MZum9xaoNV+WMJ92dz/rsX2O4hNNeRCw=)
3: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: Td9P59Epqv39peyBxAr+igvdes8I7dyd7E674H3m+W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:52:0f:19:a9:85:36:9c:2f:1c:ea:50:d7:10:e8:db:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Jun 26 01:00:39 2024 GMT
Not After : Jun 27 01:00:39 2024 GMT
Subject: CN=ab4a0436a04fb0ba7a1f0a3772fcede348036cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:fb:da:33:97:c6:45:22:2e:7a:e7:d4:3a:
15:c0:6b:f8:2b:e1:54:ad:58:df:75:ad:05:6a:49:
83:f5:d1:21:2a:a6:ab:bf:21:8c:56:18:45:46:51:
25:99:e9:41:18:ad:50:50:49:bc:34:cd:14:5f:0b:
06:4f:87:17:10:ab:9f:40:20:3e:10:44:05:71:f5:
a3:a0:22:3f:e3:6d:0b:8d:ba:bf:6f:df:5a:31:68:
c0:b7:15:f0:c0:83:9e:7d:3e:e1:9c:8b:07:5d:c1:
36:30:2a:d2:13:89:2f:c0:0f:37:c9:ba:bd:3d:ef:
9e:a3:0c:a9:bc:e8:ec:5a:ac:cf:8c:5a:4c:9a:87:
d6:5f:71:7d:76:82:b9:e8:92:de:21:2d:be:ef:c6:
a7:82:cc:78:e5:96:5b:c9:b1:2c:6b:d0:ab:c2:40:
e1:45:08:4a:52:e2:ef:1b:63:3c:0a:4d:fa:2d:b5:
8e:29:f9:56:a0:88:98:15:e7:09:ae:be:e9:cf:e1:
a2:f0:3a:5b:23:07:06:64:30:fe:f2:54:80:19:d7:
8d:3c:f6:2b:5c:4b:2c:e4:d7:c8:11:80:aa:c2:7c:
47:73:50:93:66:9c:a9:92:cd:9b:30:4e:15:03:e7:
27:6a:8c:fb:9d:10:18:cb:8e:ad:2d:b2:09:d1:6b:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4A:04:36:A0:4F:B0:BA:7A:1F:0A:37:72:FC:ED:E3:48:03:6C:DA
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:7b:88:4b:03:4c:47:ec:13:3c:d1:d8:78:6d:83:f3:f1:
d0:34:77:2e:a5:59:15:16:d2:a1:e0:26:54:6e:3a:b6:3d:0d:
ac:9c:d3:97:de:f2:34:d2:b4:4a:56:85:b6:2c:a5:c9:7a:7b:
fe:90:93:0a:cc:d7:f9:ac:f6:0b:18:f0:db:d6:1f:11:2d:62:
36:f0:34:f1:49:66:b6:31:72:bb:ac:95:dd:c6:19:ff:cb:1b:
16:1d:96:aa:1f:14:d4:c1:44:12:ba:a7:88:4d:76:21:b6:d2:
eb:83:da:af:7f:44:48:03:0a:f1:5c:75:eb:e0:91:0b:e5:0f:
ff:e8:84:b9:00:18:67:32:39:8e:28:b4:17:01:99:6f:dc:92:
f6:06:b0:d4:10:ff:75:ed:d0:54:3f:5f:81:12:ad:a5:06:7c:
98:80:dd:7b:eb:8f:82:02:48:58:07:d8:52:8b:02:1e:39:35:
64:f4:d7:01:c8:ae:b9:8c:c1:1c:2d:a4:23:94:02:30:2c:7b:
e2:d9:7b:14:cf:6b:6b:cd:23:8c:46:c1:12:33:15:ec:6f:db:
8d:26:9e:59:75:41:5b:e7:2a:46:db:90:2d:4d:51:81:6b:40:
d5:09:22:0f:da:51:c6:54:9e:5b:1b:76:2f:84:90:fc:7d:17:
7f:c2:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:28:39 2024 by rpki-client on console-ams.rpki-client.org